Default Creds is a centralized, community-driven database of factory-set credentials, stored as plain YAML files. Designed for pentesters and security researchers, it helps identify weak access points during engagement phases or audit internal infrastructure before they become a security liability.
Live Instance: default-creds.hadi.icu
API Documentation: default-creds.hadi.icu/api-docs
This repo contains only the data. It's a flat-file database: one YAML file per manufacturer in data/.
The website and API are built and hosted from a separate repo, anotherhadi/default-creds-web.
There is also a TUI to search for default credentials: default-creds-tui.
In the world of cybersecurity, "low-hanging fruit" often comes in the form of unchanged default passwords. Our mission is to provide a fast, reliable, and searchable database of these credentials to help security professionals secure systems before attackers exploit them.
Security is a collective effort. This project only grows as the community discovers and adds new default configurations.
- Want to add an app? Just create a new YAML file in
data/. - Found a mistake? Submit a Pull Request to update existing entries.
Before contributing, please read our CONTRIBUTING.md for guidelines on how to format your YAML files.
Usage of Default Creds for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.